Code Review & Architecture Fundamentals - Initial Release & More

  Luke Rogerson   code review & architecture training promotion discord

Lots of news below!

ogSec is thrilled to announce the release of our first batch of courses in the Code Review & Architecture Fundamentals series! Drawing on years of experience in reviewing complex web applications and SaaS solutions, this series is crafted for individuals looking to elevate their skills in app security testing and code review.

Our initial set of courses provides the essential groundwork for preparing and conducting effective assessments. By completing these courses, you’ll:

  • Gain foundational knowledge of the core technologies commonly found in modern web applications
  • Develop insights into data flows, storage, and processing, enabling you to pinpoint areas of focus during assessments
  • Learn a threat modelling approach that gives you a strategic perspective for identifying critical vulnerabilities and assets that require coverage

Many security professionals find starting a code review daunting and often struggle to focus effectively, especially for mature code bases and complex solutions. These introductory courses aim to help solve this challenge by showing you how to leverage client insights, materials, and initial code analysis to guide your assessment strategy and establish a solid foundation for your review.

To celebrate the release, we’re offering early bird pricing now through Black Friday and to the end of Cyber Monday (2nd December) on our Assessment Prep and Threat Modelling courses. Don’t miss this opportunity to get in on the fundamentals with a discount!

Stay tuned—over the coming months, we’ll be releasing additional courses that delve into the technical details of architecture and implementation reviews. For a full overview of current and upcoming courses, visit our courses page.

Released Courses

Common Technologies

This course provides a foundational introduction of the key technologies that power modern web applications, an essential step in contextualising your code and architecture reviews. With this course, you’ll develop the ability to identify how data flows are processed and stored within applications, allowing you to apply security principles effectively. By gaining this context, you’ll be better equipped to detect potential attack paths, misconfigurations, and other vulnerabilities as you assess complex systems.

This course is pay what you can course. Click the Buy Now button for information on suggested pricing.

Buy Now More Info


Assessment Prep

Jumping straight into an assessment may seem tempting, but thorough preparation can make all the difference. This course guides you through essential preparatory steps, ensuring that you enter each review with a clear focus and comprehensive understanding. By setting aside time to establish a solid baseline of knowledge about the solution, you’ll approach your assessments with more confidence and precision, covering all critical areas and optimising your findings.

Early Bird Discount! 33% off! Base Price: £49.50 — Total: £59.40 (inc. VAT)

Note: Tax is calculated according to your country of residence. Click ‘Buy Now’ to view the final price, including applicable taxes.

Buy Now More Info


Threat Modelling

In this course, you’ll learn to use threat modelling to identify potential vulnerabilities proactively. Beyond just a development tool, threat modelling allows you to prioritise targets strategically during your review. Building on your assessment preparation, you’ll explore how to pinpoint and assess risks to the system’s key assets. Rather than simply seeking individual vulnerabilities, you’ll adopt a broader perspective on security, focusing on the most significant attack paths and enhancing your assessment strategy.

Early Bird Discount! 33% off! Base Price: £49.50 — Total: £59.40 (inc. VAT)

Note: Tax is calculated according to your country of residence. Click ‘Buy Now’ to view the final price, including applicable taxes.

Buy Now More Info


Discord Community

We’re excited to announce that our community Discord server is now open! This space is designed for industry professionals and learners to connect, discuss application security, code review techniques, and much more. Whether you’re looking to share insights, get support, or learn with like-minded peers, our community is here for you. We can’t wait to welcome you!

Join Now

Luke has over ten years of experience in cyber security, specialising in technical due diligence for mergers and acquisitions. His work includes leading teams through complex projects as well as direct involvement in code reviews, web application assessments, and threat modelling.

Twitter — LinkedIn — GitHub — Blog